Sources Sought SEER.pdf

Revised March 2017

Sources Sought

The Army Contracting Command – Letterkenny Contracting Office (CCAM-MLK) is issuing this Sources Sought/Request for Information as a means of conducting market research to identify parties having an interest in and the resources to support this requirement for SEER Software Sustainment Services at Letterkenny Army Depot.

The result of this market research will contribute to determining the method of procurement. The applicable North American Industry Classification System (NAICS) code assigned to this procurement is 334614 Software and Other Prerecorded Compact Disc, Tape, and Record Reproducing.

There is no solicitation at this time. This request for capability information does not constitute a request for proposals; submission of any information in response to this market survey is purely voluntary; the government assumes no financial responsibility for any costs incurred. Contractor should not provide any pricing information. The sole purpose of this request is to locate qualified, experienced, and interested potential sources.

If your organization has the potential capacity to provide these products, please provide the following information:

1) Business name, mailing address, email address, website address, Point of

Contact (POC), telephone number

2) Business size, any socioeconomic status (i.e. HUB Zone,8(a) Veteran- Owned, Women-Owned, etc.), company Cage Code and DUNS number, type of ownership for the organization

3) Tailored capability statements addressing the particulars of this effort, with appropriate documentation supporting claims of organizational and staff capability. If significant subcontracting or teaming is anticipated in order to deliver technical capability, organizations should address the administrative and management structure of such arrangements

4) The NAICS code(s) and PSCs/FSCs your company usually performs under

Government contracts

5) Past performance with government agencies.

The government will evaluate market information to ascertain potential market capacity to provide products or services consistent in scope and scale with those described in this notice and otherwise anticipated.

Based on the responses to this sources sought/market research, this

Revised March 2017 requirement may be set-aside for small businesses or procured through full and open competition, and multiple awards may be made. Telephone inquiries will not be accepted or acknowledged, and no feedback or evaluations will be provided to companies regarding their submissions.

Contractors are required to be registered in the System for Award Management (SAM) and Wide Area Work Flow (WAWF) in order to be awarded government contracts.

Submission Instructions: Interested parties who consider themselves qualified to provide the listed products are invited to submit a response to this Sources Sought by 02 MAY 2022 at 2:00PM. The response/statement of capabilities must be complete and sufficiently detailed to allow the Government to determine the contractor’s qualifications.

All responses under this Sources Sought must be emailed to mary.e.shifflett2.civ@army.mil.

If you have any questions concerning this opportunity please contact: Mary Shifflett at mary.e.shifflett2.civ@army.mil.

SHAUN LEATHERMAN

Contracting Officer

DRAFT

PERFORMANCE WORK STATEMENT (PWS)

Seer Software Maintenance For the Directorate of Information Management (DOIM)

At Letterkenny Army Depot (LEAD)

1.0 General

1.1 Scope: The contractor shall provide all personnel, equipment, tools, materials, supervision, quality control and other items and non-personal services necessary to perform Seer Software Maintenance as defined in this PWS, except as specified in Section 3.0 as Government Furnished Property or Services. The contractor shall perform to the standards in this contract. The contractor may have a requirement to provide on-site maintenance in an advisory role. At no time with the contractor perform any maintenance to powered or live equipment.

1.2 Background: This contract is for 24X7 technical support, software updates and upgrades, and access to Customer Support Center web services of existing Government owned Software that is utilized in various buildings at LEAD. The service response time shall be within one (1) hour from the service request, 24 hours a day, 7 days a week including holidays, scheduled by the Contracting Officers Representative or authorized government representative. Service requests shall be made by the customer through the company’s web site or telephone

1.3 Period of Performance (PoP): The Period of Performance shall be within six (6) weeks of the contract award, with a one (1) year warranty starting the day the new system is accepted. The Period of Performance is identified in the solicitation and resulting contract.

Base Period: 20 June 2022 to 19 June 2023 Option Period 1 20 June 2023 to 19 June 2024 Option Period 2 20 June 2024 to 19 June 2025 Option Period 3 20 June 2025 to 19 June 2026 Option Period 4 20 June 2026 to 19 June 2027

1.4 General Information

1.4.1 Recognized Holidays: The following are recognized US Federal holidays. The Contractor shall perform maintenance on these days when required:

1.4.1.1 New Year’s Day: January 1st

1.4.1.2 Martin Luther King, Jr.’s Birthday: Third Monday in January

1.4.1.3 President’s Day: Third Monday in February

1.4.1.4 Memorial Day: Last Monday in May

1.4.1.5 Juneteenth: June 19th

1.4.1.6 Independence Day: July 4th

1.4.1.7 Labor Day: First Monday in September

1.4.1.8 Columbus Day: Second Monday in October

1.4.1.9 Veteran’s Day: November 11th

1.4.1.10 Thanksgiving Day Fourth Thursday in November

1.4.1.11 Christmas Day: December 25th

1.4.2 Place and Performance of Services: The Contractor shall provide services 7:00 a.m. to 3:30 p.m. Monday through Friday excluding holidays, except when the Government facility/installation is closed due to local or national emergencies, administrative closings, or similar Government-directed facility/installation closings. The Contractor shall at all times maintain an adequate work force for the uninterrupted performance of all tasks defined within this PWS when the Government facility/installation is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the work force are essential.

1.4.3 Security Requirements: The Contractor and all associated sub-Contractor’s employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by Government representative). The Contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, or Security Office.

Contractor workforce shall comply with all personal identity verification requirements as directed by DOD, HQDA, and/or local policy. Should the Force Protection Condition (FPCON) change, the Government may require changes in Contractor security matters or processes.

1.4.3.1 Physical Security: The Contractor shall safeguard all Government property provided for Contractor use. At the close of each work period/day, Government facilities, equipment and materials shall be secured.

1.4.3.2 Access to a DoD Facility or Installation (no CAC): Contractor and all associated subcontractor personnel shall comply with adjudication standards and processes using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (Army Directive 2014-05/Army Regulation 190-13), applicable installation, facility, area and Commander access and local security policies and procedures (provided by Government representative), or at Outside the Continental Unites States locations, in accordance with status of forces agreements and other theater regulations.

1.4.3.3 AT Level 1 Awareness Training: All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR or to the contracting officer, if a COR is not assigned, within 30 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website: https://jkodirect.jten.mil/Atlas2/page/login/Login.jsf

1.4.3.4 iWATCH Training: The contractor and all associated subcontractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the CO. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT30 calendar days after contract award. Training website: https://www.letterkenny.army.mil/iwatch/

1.4.3.5 Information Assurance Training: All Contractor employees and associated subcontractor employees shall complete the DoD Information Assurance Awareness Training (Cyber Awareness Challenge) before issuance of network access and annually thereafter. All Contractor employees working IA/IT functions shall comply with DoD and Army training requirements in DoDD 8140.01, DoDD 8570.01-M and AR 25-2 within six months of appointment to IA/IT functions.

1.4.3.6 OPSEC Training: Per AR 530-1, the contractor employees must complete Level I OPSEC Awareness training. New employees must be trained with 30 calendar days of their reporting for duty and annually thereafter. Training website:

https://www.letterkenny.army.mil/Portals/96/PDF/LEAD_OPSEC_FULL.pdf

1.4.3.7 Remote Access: Remote access into the Letterkenny Army Depot Network from employee-owned information systems (EOISs) for remote management activities is not authorized per AR 25-2 para. 4-31(g).

1.4.3.8 Information Technology Requirements: The Contractor shall provide maintenance, product license, upgrades, updates and patches for the software. The Contractor shall ensure software changes do not negatively impact the security posture of the environment, prior to maintenance, the deployment of upgrades, updates and patches.

1.4.3.8.1 DoD Approved Hardware/Software: The Contractor shall meet specified entrance criteria prior to hardware / software being deployed on the Government network. The hardware must be DoD approved through either Defense Information System Agency (DISA) Unified Capabilities Approved Products List (UC APL), Federal Information Processing Standards (FIPS) 140-2, NSA Crypto, National Information Assurance Partnership (NIAP) Common Criteria Evaluation and Validation Scheme (CCEVS), or Common Criteria.

1.4.3.8.2 Certificate of Network Worthiness (CoN): The Contractor shall ensure that all provided software has an approved Certificate of Network Worthiness (CoN) and a sustainment plan. This shall include periodic software upgrades, updates, firmware releases and patches when necessary in order to maintain DoD certification standards.

This condition must be met for the term of the contract in order to maintain the aforementioned DoD standards.

1.4.3.8.3 Software Permissions Restrictions: All supplied software must be capable of operating in a multi-user environment and data which contains permissions information shall be hidden from view and inaccessible to those with less than administrator level access. Shared accounts shall not be used, and users shall only be authorized the minimum security rights to operate the application software. Users will not have access to system or software configuration items (e.g., Control Panel, software and hardware installation). Under no circumstances will the intended end user log in using the Administrator or Root account for routine operation of the equipment. The use of these accounts will be restricted to only administrative activities which will be carried out by LEAD Information Technology personnel.

1.4.3.8.4 Government Operating Systems: The Contractor shall ensure that all application software is fully functional when residing on the latest Department of Defense (DoD) mandated version of operating system used by the Government. If applicable, the system’s OS must be Microsoft Windows 10, Windows Server 2012R2, Red Hat Linux v7.X or Red Hat Linux v6.X. Any OS supplied with the system must contain all service packs, updated patches, and hot fixes. All patching and fixes will be current as of a predefined date agreed upon by the vendor and the Government.

1.4.3.8.5 Security Technical Implementation Guides (STIGs): Defense Information System Agency (DISA) STIGs are configuration standards for the Department of Defense and contain technical guidance to lock down information systems and software applications that might otherwise be vulnerable to malicious attacks. The Contractor shall be responsible for ensuring all appropriate STIGs are implemented and their software runs acceptably while secure.

1.4.3.8.6 Army Golden Master: The Contractor shall ensure their software functions as intended when installed on top of the AGM. If necessary, LEAD will supply the Contractor with a copy of the AGM.

1.4.3.8.7 User Acceptance Testing (UAT): LEAD Cyber Security Personnel will have the ability to conduct validation testing with approved security tools prior to equipment being introduced to the shop floor. This testing will also satisfy any UAT requirements.

A UAT Plan will be furnished prior to testing and all equipment documentation will be made available for review during the test. If discrepancies are discovered the Contractor shall remediate identified issues prior to Government acceptance.

1.4.3.8.8 End of Life Requirements: Hardware and/or software that has reached end-of-life will be removed from the Government network. The Contractor shall provide the Government with a plan of action no later than 1 year prior to end-of-life that addresses any requirements of a new version of hardware or software needed to continue operations. This could involve submission of a new CoN.

1.4.3.9 Acceptable User Policy (AUP): Contractors performing work on an Information System that is part of the Letterkenny Army Depot Network shall be required to sign and comply with the Letterkenny Army Depot AUP prior to performing work and annually for the duration of the contract.

1.4.4 Special Qualifications: The Contractor shall have experience in the evaluation, repair and test of the Hardware and Software described in this PWS.

1.4.5 Contract Manager (CM): The Contractor shall provide a CM who shall ensure performance under this contract. The name of this person, and an alternate who shall act for the Contractor when the CM is absent, shall be designated in writing to the Contracting Officer. The CM or alternate shall have full authority to act for the Contractor on all contract matters relating to daily operation of this contract.

1.4.6 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones and working in other situations where their Contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. The Contractor shall also ensure that all documents or reports produced by Contractor personnel are suitably marked as Contractor products or that Contractor participation is appropriately disclosed.

2.0 Definitions and Acronyms

2.1 Definitions

2.1.1 Contracting Officer (KO). A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

2.1.2 Contractor. A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

2.1.3 Contracting Officer's Representative (COR). An employee of the U.S.

Government designated by the KO to monitor Contractor performance. Such appointment shall be in writing and shall state the scope of authority and limitations.

This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4 Defective Service. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5 Deliverable. Anything that can be physically delivered and includes non-manufactured things such as meeting minutes or reports.

2.1.6 Information Assurance (IA). A unified approach to protect unclassified, sensitive, or classified information stored, processed, accessed, or transmitted by Information Systems, established to consolidate and focus Army efforts in securing that information, including its associated systems and resources, to increase the level of trust of this information and the originating source.

2.1.7 Performance Work Statement (PWS): The PWS is the description of what the Government intends to buy, regardless of the outcome of the cost comparison. The PWS is a method for identifying what we require and for the Contractor to tell us how they will meet those requirements. The Government’s Most Efficient Organization (MEO) and related costs and Contractor technical and cost proposals are all based on the PWS.

2.1.8 Quality Assurance. The Government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.9 Quality Assurance Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of Contractor performance.

2.1.10 Quality Control. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.11 Subcontractor. One that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subcontractor.

2.1.12 Work Day. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.13 Work Week. Monday through Friday, unless specified otherwise.

2.2 Acronyms:

AFARS Army Federal Acquisition Regulation Supplement AGM Army Golden Master AR Army Regulation ATO Antiterrorism Officer CFR Code of Federal Regulations CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTS Commercial-Off-the-Shelf DA Department of the Army DD250 Department of Defense Form 250 (Receiving Report)

DD254 Department of Defense Form 254 (Contract Security Classification Specification) DFARS Defense Federal Acquisition Regulation Supplement DOD Department of Defense FAR Federal Acquisition Regulation KO Contracting Officer OCI Organizational Conflict of Interest POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QC Quality Control TE Technical Exhibit

3.0 Government Furnished Property, Material, Equipment and Services

(GFP/M/E/S):

3.0.1 General: The Government will provide property, material, equipment and/or services outlined in this PWS.

3.0.2 Facilities: All facilities currently located at LEAD will be available as necessary and applicable for the Contractor’s use in the performance of duties outlined in this

PWS.

3.0.3 Utilities: All utilities currently installed within LEAD shall be available for the Contractor’s use in the performance of duties outlined in this PWS.

3.0.4 Equipment/Hardware: N/A

3.0.5 Software/Firmware:

3.0.6 The contractor shall provide maintenance, product license, upgrades, updates and patches for the software. The contractor shall ensure software changes do not negatively impact the security posture of the environment, prior to maintenance, the deployment of upgrades, updates and patches.

3.0.7 The contractor shall ensure that all application software is fully functional when residing on Defense Information System Agency (DISA) Security Technical Implementation Guide (STIG) compliant operating systems used by the Government.

3.0.8 The contractor shall ensure that all application software is fully functional when residing on the latest Department of Defense (DoD) mandated version of operating system used by the Government.

4.0 Contractor Furnished Property, Material, and Equipment (CFP/M/E): Except for those items specifically stated to be Government-Furnished in Paragraph 3.0, the

Contractor shall furnish everything required to perform the services outlined in this

PWS.

4.0.1 Equipment/Hardware: N/A

5.0 Contractor Requirements:

5.0.1 The contractor shall Provide Platinum Service Coverage for the Equipment/Hardware and Software/Firmware. This shall include all labor, equipment, tools, parts, materials, shipping costs, and travel expenses.

5.0.2 Respond to telephone maintenance calls within one (1) hour or respond to email maintenance requests within 24 hours to evaluate or repair the Equipment/Hardware issues 24 hours a day, 7 days a week including weekends and holidays. In the event that the issue cannot be resolved by telephone the contractor shall be on-site within 48 hours upon request by the Contracting Officers Representative (COR) or other Government Representative. Maintenance calls can be initiated by telephone, email or through the vendor’s site.

5.0.3 The Contractor shall provide Quarterly Onsite Maintenance – up to four (4) on-site visits. Each quarterly maintenance visit to be complete within two (2) days of the requested date and is estimated at two (2) days. The COR or an authorized government representative shall schedule the maintenance.

5.0.4 The Contractor shall provide Emergency Onsite Maintenance – up to two (2) on-site visits. Each emergency maintenance visit shall be complete within two (2) days of the requested date and is estimated at two (2) days. The COR or an authorized government representative shall schedule the maintenance.

5.0.5 All replacement Equipment/Hardware that cannot be repaired within eight (8) hours shall be shipped overnight at no additional expense to the Government.

5.0.6 Provide product license (if required), upgrades, updates, firmware releases and patches when available via email. If they are too large to be sent by email, they will be sent by mail at no additional expense to the Government.

5.0.7 Provide a maintenance memo stating what the issue was, what was done to repair the issue, and a list of the hardware or software that was utilized to correct the issue;

within five (5) business days. This memo is separate from the Invoice.

5.0.8 The Government will keep all hard drives and any other media storage that touched the Government network.

6.0 CONTRACTOR MANPOWER REPORTING (CMR): The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the Contractor shall report ALL Contractor manpower

(including subcontractor manpower) required for performance of this contract. The Contractor shall completely fill in all the information in the format using the following web address https://www.sam.gov. The required information includes: (1) Contracting Office, KO, Contracting Officer’s Technical Representative (COTR) or also known as the Contracting Officer’s Representative (COR); (2) Contract number, including task and delivery order number; (3) Beginning and ending dates covered by reporting period; (4) Contractor's name, address, phone number, e-mail address, identity of Contractor employee entering data; (5) Estimated direct labor hours (including subcontractors); (6) Estimated direct labor dollars paid this reporting period (including subcontractors); (7) Total payments (including subcontractors); (8) Predominant Federal Service Code (FSC) reflecting services provided by Contractor (and separate predominant FSC for each subcontractor if different); (9) Estimated data collection cost; (10) Organizational title associated with the Unit Identification Code (UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the Contractor with its UIC for the purposes of reporting this information); (11) Locations where Contractor and subcontractors perform the work (specified by zip code in the United States and nearest city, country, when in an overseas location, using standardized nomenclature provided on website); (12) Presence of deployment or contingency contract language; and (13) Number of Contractor and subcontractor employees deployed in theater this reporting period (by country). As part of its submission, the Contractor shall provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period shall be the period of performance not to exceed 12 months ending September 30 of each Government fiscal year and must be reported by 31 October of each calendar year. Contractors may use a direct XML data transfer to the database server or fill in the fields on the website. The XML direct transfer is a format for transferring files from a Contractor’s system to the secure website without the need for separate data entries for each required data element at the website. The specific formats for the XML direct transfer may be downloaded from the website.

TECHNICAL EXHIBIT 1

Performance Requirements Summary

This Performance Requirements Summary includes performance standards. The Government will use these standards to determine contractor performance and shall compare contractor performance to the Acceptable Quality Level (AQL).

PWS

Paragraph

Performance Objective

Standard Performance Threshold (Minimum

Acceptable Level (AQL))

Method of Surveillance / Performed By

5.0.1 Provide Platinum

Service Coverage for the Equipment/Hardware and Software/Firmware

Life of Contract 100% Customer Feedback

5.0.2 Phone support Within one (1) hour 100% Customer

Feedback

5.0.3 Semi-annual Onsite

Maintenance

Life of Contract 100% Customer Feedback

5.0.4 Emergency Onsite

Maintenance

Life of Contract 100% Customer Feedback

5.0.5 Equipment/Hardware Life of Contract 100% Customer

Feedback

5.0.6 Upgrades, updates, firmware releases and

patches

Life of Contract 100% Customer Feedback

5.0.7 Maintenance memo Within five (5) days 100% Customer

Feedback

5.0.8 Government will keep

all hard drives/other media storage that touched Government network.

Life of Contract 100% Customer Feedback

TECHNICAL EXHIBIT 2

Deliverables Schedule

Deliverable Frequency Number of Copies

Medium/Format Submit To

6.0 - CMRA Annually N/A Electronic Submission https://www.sam.gov